<HTML>
<HEAD>
<TITLE>Re: [Freeswitch-users] remove in local SDP word FREESWITCH</TITLE>
</HEAD>
<BODY>
<FONT FACE="Monaco, Courier New"><SPAN STYLE='font-size:11pt'>Where did I say that FS was broken? I said sonus (which is very widely used) is broken and we use proper endpoint tagging (in the SDP and other places) to identify broken endpoints so we can properly compensate for it<BR>
<BR>
<BR>
On 6/24/13 2:07 AM, "Dmitry Lysenko" <<a href="dvl36.ripe.nick@gmail.com">dvl36.ripe.nick@gmail.com</a>> wrote:<BR>
<BR>
</SPAN></FONT><BLOCKQUOTE><FONT FACE="Monaco, Courier New"><SPAN STYLE='font-size:11pt'>Freeswitch is open source and that's great. So checking the sources will resolve this problem.<BR>
<BR>
<BR>
2013/6/24 Ken Rice <<a href="krice@freeswitch.org">krice@freeswitch.org</a>><BR>
</SPAN></FONT><BLOCKQUOTE><FONT FACE="Monaco, Courier New"><SPAN STYLE='font-size:11pt'>Which breaks actually breaks things... For example... We actually put FS into a special mode when we detect sonus... Why would we do this? Because sonus has broken RTP and we have to do this for compatibility reasons... Theres other things that may happen along these lines also...<BR>
<BR>
<BR>
<BR>
On 6/24/13 1:19 AM, "John M" <<a href="j_mj@aol.com">j_mj@aol.com</a> <<a href="http://j_mj@aol.com">http://j_mj@aol.com</a>> > wrote:<BR>
<BR>
</SPAN></FONT><BLOCKQUOTE><SPAN STYLE='font-size:11pt'><FONT FACE="Arial">I don't think anyone expects that security by obscurity is all you need .. but in terms of tools that you use to secure your network it's a valid addition.<BR>
<BR>
Kinda like putting your hand over the keypad while entering your PIN at the ATM, it's not all you need to do but it's an extra step to help keep your account secure.<BR>
<BR>
If I present my server as an asterisk server and the attacker has a special set of scripts to attack Asterisk .. he'll probably/might use them and when it fails .. move on.<BR>
<BR>
In regard to the ability to be able to disguise the switch name .. i think this is a valid reason.<BR>
<BR>
Another one that comes to mind is competition .. we work in a tight local market and have some competitors that follow us liek sheep .. whatever price we set they follow.. etc..<BR>
<BR>
They run similar platforms hosted on Asterisk servers .. we are switching to FS and this is going to give us an edge .. I don't want these competitors to know that we are using a superior platform .. so I modify the name so if they are connected to us via a psuedo account to monitor our features they still think we're using Asterisk...<BR>
<BR>
<BR>
<BR>
</FONT></SPAN><FONT SIZE="2"><FONT FACE="Helvetica, Verdana, Arial"><SPAN STYLE='font-size:10pt'>-----Original Message-----<BR>
From: Steven Ayre <<a href="steveayre@gmail.com">steveayre@gmail.com</a> <<a href="http://steveayre@gmail.com">http://steveayre@gmail.com</a>> ><BR>
To: FreeSWITCH Users Help <<a href="freeswitch-users@lists.freeswitch.org">freeswitch-users@lists.freeswitch.org</a> <<a href="http://freeswitch-users@lists.freeswitch.org">http://freeswitch-users@lists.freeswitch.org</a>> ><BR>
Sent: Fri, Jun 21, 2013 6:05 pm<BR>
Subject: Re: [Freeswitch-users] remove in local SDP word FREESWITCH<BR>
<BR>
</SPAN></FONT></FONT><BLOCKQUOTE><FONT SIZE="2"><SPAN STYLE='font-size:10pt'><FONT FACE="Arial">2) <U>Security trough obscurity != security</U> its always better than nothing. " hey you don't need to guess the <BR>
the software I'm using , I'm giving the info for free just find an entry point and you got it ...."<BR>
</FONT></SPAN></FONT></BLOCKQUOTE><FONT SIZE="2"><SPAN STYLE='font-size:10pt'><FONT FACE="Helvetica, Verdana, Arial"><BR>
Actually I'd argue the opposite. Security through obscurity often makes people assume they're secure and therefore neglect securing their systems in the places that actually matter.<BR>
<BR>
The only argument I can really see of hiding that you're running $version of $product is that an bug in that $version means an exploit exists.<BR>
<BR>
If that's the case then you need to upgrade to a patched copy of $product - you can NOT rely on the fact that people will not realise that they can use the exploit because you're hiding what you're running.<BR>
<BR>
The flaw still exists and attackers might either a) guess you're using $product and try the exploit anyway or b) have their bot just randomly try every exploit in the book against you until one works in which case they don't even need to know you're using $product.<BR>
<BR>
The things that matte are actually verifying your authentication is working correctly, you're running the latest software, you're following software updates / security announcements, etc.<BR>
<BR>
Besides even when $product/$version are hidden they can often be found through fingerprinting by looking at differing behaviour between different products and within a product between versions.<BR>
<BR>
-Steve<BR>
<BR>
<BR>
<BR>
<BR>
On 21 June 2013 07:59, Antonio Teixeira <<a href="eagle.antonio@gmail.com">eagle.antonio@gmail.com</a> <<a href="http://eagle.antonio@gmail.com">http://eagle.antonio@gmail.com</a>> > wrote:<BR>
</FONT></SPAN></FONT><BLOCKQUOTE><FONT SIZE="2"><SPAN STYLE='font-size:10pt'><FONT FACE="Helvetica, Verdana, Arial"> <BR>
<BR>
@Ken<BR>
I think we need to drop into the real world...<BR>
<BR>
1) Ok .,... Don't forget to say thanks to Debian , CentOs , Fedora , PHP , Python , Microsoft , all the authors of the OpenSource Libs , the creator of Make , the creator of the IDE that the Dev team uses , etc etc when you deliver the next project to your client ...<BR>
<BR>
2)<BR>
<U>Security trough obscurity != security</U> its always better than nothing. " hey you don't need to guess the <BR>
the software I'm using , I'm giving the info for free just find an entry point and you got it ...."<BR>
<BR>
I could also imagine you agree with showing the version of the software in the HTPP headers (stuff that happens on some webservers/libs ( from my ming i can recall Django?!).<BR>
<BR>
3)<BR>
The clients pays it doesn't really care about what software you use ( unless he fears some patent infringement) he wants results.<BR>
<BR>
4)<BR>
No , Compliance could be internal or external the end-client could simply say "i don't want the freeswitch brand".<BR>
<BR>
<BR>
---- ///// ----<BR>
@all<BR>
I don't know you guys but my daily work is developing software for some fairly large financial institutions and sincerely i think you are all over reacting to this thing.<BR>
Yes if you open-source something you will get part of your software stolen , changed or use in a way you were not expecting and not given credit for , that's life .If you don't want it , close the source , resell it , ask for NDA's , etc.<BR>
In my daily work me and my collegues use alot of open source ( contrary to the popular belief) , closed source and everything in between and you don't expect a public statement thanking anyone for anything.<BR>
<BR>
This is the way life works and with open-source this is our current world ( i think the FS Team could even offer a fully custom branded solution) so it could help monetize the project.<BR>
<BR>
And before you start thinking yes i bought G729 licenses , the FS Book even before it was out and no to many miles between me and Gluecon , yes i know airplanes exist :D.<BR>
<BR>
P.S - I Also assume that you all as sysadmins once found a problem that a blogger may have solved and on your final report to the administration you didn't wrote " problem solved by Blogger XXXXXX"....<BR>
<BR>
And never forget he is just the mailman sometimes the boss wants something ( even if not morally correct ) and you have to do it. <BR>
But the point raised by Anthony regarding the SDP "freeswitch flag" is important and you be featured on the wiki :)<BR>
<FONT COLOR="#888888"> <BR>
Antonio Teixeira</FONT> <BR>
<BR>
<BR>
<BR>
On 6/19/13 3:49 PM, Ken Rice wrote:<BR>
<BR>
<BR>
</FONT></SPAN></FONT><BLOCKQUOTE><FONT SIZE="2"><SPAN STYLE='font-size:10pt'><FONT FACE="Helvetica, Verdana, Arial"> <BR>
Ok... Lets look at these...<BR>
<BR>
Branding... I don't want to show people that I'm using F/OSS software for<BR>
running my for profit business so I can tell them I'm using either<BR>
${some_comercial_platform} or ${we_developed_this_ourselves}<BR>
<BR>
Security/Security Requirements - Security throught obscurity != security...<BR>
<BR>
Client Requirements - That's a new one one... Unless client is <see<BR>
branding><BR>
<BR>
Compliance - isnt this the same thing as see security<BR>
<BR>
<BR>
On 6/19/13 8:44 AM, "Antonio Teixeira" <<a href="eagle.antonio@gmail.com">eagle.antonio@gmail.com</a> <<a href="http://eagle.antonio@gmail.com">http://eagle.antonio@gmail.com</a>> > <<a href="mailto:eagle.antonio@gmail.com">mailto:eagle.antonio@gmail.com</a>> wrote:<BR>
<BR>
<BR>
</FONT></SPAN></FONT><BLOCKQUOTE><FONT SIZE="2"><SPAN STYLE='font-size:10pt'><FONT FACE="Helvetica, Verdana, Arial"> <BR>
I could think off<BR>
<BR>
Branding<BR>
Security<BR>
Client Requirements<BR>
Security Requirements<BR>
Compliance<BR>
<BR>
<BR>
On 6/19/13 2:37 PM, Michael Jerris wrote:<BR>
<BR>
</FONT></SPAN></FONT><BLOCKQUOTE><FONT SIZE="2"><SPAN STYLE='font-size:10pt'><FONT FACE="Helvetica, Verdana, Arial"> <BR>
Why would you want to do that?<BR>
<BR>
On Jun 19, 2013, at 9:28 AM, Abdullah <<a href="abdullah@smonte.com">abdullah@smonte.com</a> <<a href="http://abdullah@smonte.com">http://abdullah@smonte.com</a>> > <<a href="mailto:abdullah@smonte.com">mailto:abdullah@smonte.com</a>> wrote:<BR>
<BR>
<BR>
</FONT></SPAN></FONT></BLOCKQUOTE></BLOCKQUOTE></BLOCKQUOTE></BLOCKQUOTE></BLOCKQUOTE></BLOCKQUOTE></BLOCKQUOTE><FONT SIZE="2"><SPAN STYLE='font-size:10pt'><FONT FACE="Helvetica, Verdana, Arial"> <BR>
HI ALL ,<BR>
<BR>
please help me ,how to change or remove o=*"FreeSWITCH"* in free switch Cli<BR>
Log .<BR>
<BR>
any idea ??<BR>
<BR>
<BR>
<BR>
o=FreeSWITCH 1369449071 1369449072 IN IP4 10.10.50.1<BR>
s=FreeSWITCH<BR>
c=IN IP4 10.10.50.1<BR>
<BR>
</FONT></SPAN></FONT><BLOCKQUOTE><BLOCKQUOTE><BLOCKQUOTE><BLOCKQUOTE><BLOCKQUOTE><BLOCKQUOTE><BLOCKQUOTE><FONT SIZE="2"><SPAN STYLE='font-size:10pt'><FONT FACE="Helvetica, Verdana, Arial"> <BR>
_________________________________________________________________________<BR>
Professional FreeSWITCH Consulting Services:<BR>
<a href="consulting@freeswitch.org">consulting@freeswitch.org</a> <<a href="http://consulting@freeswitch.org">http://consulting@freeswitch.org</a>> <BR>
<a href="http://www.freeswitchsolutions.com">http://www.freeswitchsolutions.com</a><BR>
<BR>
FreeSWITCH-powered IP PBX: The CudaTel Communication Server<BR>
<a href="http://www.cudatel.com">http://www.cudatel.com</a><BR>
<BR>
Official FreeSWITCH Sites<BR>
<a href="http://www.freeswitch.org">http://www.freeswitch.org</a><BR>
<a href="http://wiki.freeswitch.org">http://wiki.freeswitch.org</a><BR>
<a href="http://www.cluecon.com">http://www.cluecon.com</a><BR>
<BR>
FreeSWITCH-users mailing list<BR>
<a href="FreeSWITCH-users@lists.freeswitch.org">FreeSWITCH-users@lists.freeswitch.org</a> <<a href="http://FreeSWITCH-users@lists.freeswitch.org">http://FreeSWITCH-users@lists.freeswitch.org</a>> <BR>
<a href="http://lists.freeswitch.org/mailman/listinfo/freeswitch-users">http://lists.freeswitch.org/mailman/listinfo/freeswitch-users</a><BR>
UNSUBSCRIBE:<a href="http://lists.freeswitch.org/mailman/options/freeswitch-users">http://lists.freeswitch.org/mailman/options/freeswitch-users</a><BR>
<a href="http://www.freeswitch.org">http://www.freeswitch.org</a><BR>
<BR>
</FONT></SPAN></FONT></BLOCKQUOTE><FONT SIZE="2"><SPAN STYLE='font-size:10pt'><FONT FACE="Helvetica, Verdana, Arial"> <BR>
_________________________________________________________________________<BR>
Professional FreeSWITCH Consulting Services:<BR>
<a href="consulting@freeswitch.org">consulting@freeswitch.org</a> <<a href="http://consulting@freeswitch.org">http://consulting@freeswitch.org</a>> <BR>
<a href="http://www.freeswitchsolutions.com">http://www.freeswitchsolutions.com</a><BR>
<BR>
FreeSWITCH-powered IP PBX: The CudaTel Communication Server<BR>
<a href="http://www.cudatel.com">http://www.cudatel.com</a><BR>
<BR>
Official FreeSWITCH Sites<BR>
<a href="http://www.freeswitch.org">http://www.freeswitch.org</a><BR>
<a href="http://wiki.freeswitch.org">http://wiki.freeswitch.org</a><BR>
<a href="http://www.cluecon.com">http://www.cluecon.com</a><BR>
<BR>
FreeSWITCH-users mailing list<BR>
<a href="FreeSWITCH-users@lists.freeswitch.org">FreeSWITCH-users@lists.freeswitch.org</a> <<a href="http://FreeSWITCH-users@lists.freeswitch.org">http://FreeSWITCH-users@lists.freeswitch.org</a>> <BR>
<a href="http://lists.freeswitch.org/mailman/listinfo/freeswitch-users">http://lists.freeswitch.org/mailman/listinfo/freeswitch-users</a><BR>
UNSUBSCRIBE:<a href="http://lists.freeswitch.org/mailman/options/freeswitch-users">http://lists.freeswitch.org/mailman/options/freeswitch-users</a><BR>
<a href="http://www.freeswitch.org">http://www.freeswitch.org</a><BR>
<BR>
</FONT></SPAN></FONT></BLOCKQUOTE><FONT SIZE="2"><SPAN STYLE='font-size:10pt'><FONT FACE="Helvetica, Verdana, Arial"> <BR>
</FONT></SPAN></FONT></BLOCKQUOTE><FONT SIZE="2"><SPAN STYLE='font-size:10pt'><FONT FACE="Helvetica, Verdana, Arial"> <BR>
<BR>
<BR>
_________________________________________________________________________<BR>
Professional FreeSWITCH Consulting Services:<BR>
<a href="consulting@freeswitch.org">consulting@freeswitch.org</a> <<a href="http://consulting@freeswitch.org">http://consulting@freeswitch.org</a>> <BR>
<a href="http://www.freeswitchsolutions.com">http://www.freeswitchsolutions.com</a><BR>
<BR>
FreeSWITCH-powered IP PBX: The CudaTel Communication Server<BR>
<a href="http://www.cudatel.com">http://www.cudatel.com</a><BR>
<BR>
Official FreeSWITCH Sites<BR>
<a href="http://www.freeswitch.org">http://www.freeswitch.org</a><BR>
<a href="http://wiki.freeswitch.org">http://wiki.freeswitch.org</a><BR>
<a href="http://www.cluecon.com">http://www.cluecon.com</a><BR>
<BR>
FreeSWITCH-users mailing list<BR>
<a href="FreeSWITCH-users@lists.freeswitch.org">FreeSWITCH-users@lists.freeswitch.org</a> <<a href="http://FreeSWITCH-users@lists.freeswitch.org">http://FreeSWITCH-users@lists.freeswitch.org</a>> <BR>
<a href="http://lists.freeswitch.org/mailman/listinfo/freeswitch-users">http://lists.freeswitch.org/mailman/listinfo/freeswitch-users</a><BR>
UNSUBSCRIBE:<a href="http://lists.freeswitch.org/mailman/options/freeswitch-users">http://lists.freeswitch.org/mailman/options/freeswitch-users</a><BR>
<a href="http://www.freeswitch.org">http://www.freeswitch.org</a><BR>
<BR>
</FONT></SPAN></FONT></BLOCKQUOTE><FONT SIZE="2"><SPAN STYLE='font-size:10pt'><FONT FACE="Helvetica, Verdana, Arial"><BR>
</FONT><FONT FACE="Consolas, Courier New, Courier">_________________________________________________________________________<BR>
Professional FreeSWITCH Consulting Services:<BR>
<a href="consulting@freeswitch.org">consulting@freeswitch.org</a> <<a href="http://consulting@freeswitch.org">http://consulting@freeswitch.org</a>> <BR>
</FONT></SPAN></FONT><FONT SIZE="1"><FONT FACE="Tahoma, Verdana, Helvetica, Arial"><SPAN STYLE='font-size:9pt'><a href="http://www.freeswitchsolutions.com">http://www.freeswitchsolutions.com</a><BR>
<BR>
FreeSWITCH-powered IP PBX: The CudaTel Communication Server<BR>
<a href="http://www.cudatel.com">http://www.cudatel.com</a><BR>
<BR>
Official FreeSWITCH Sites<BR>
<a href="http://www.freeswitch.org">http://www.freeswitch.org</a><BR>
<a href="http://wiki.freeswitch.org">http://wiki.freeswitch.org</a><BR>
<a href="http://www.cluecon.com">http://www.cluecon.com</a><BR>
<BR>
FreeSWITCH-users mailing list<BR>
<a href="FreeSWITCH-users@lists.freeswitch.org">FreeSWITCH-users@lists.freeswitch.org</a> <<a href="http://FreeSWITCH-users@lists.freeswitch.org">http://FreeSWITCH-users@lists.freeswitch.org</a>> <BR>
<a href="http://lists.freeswitch.org/mailman/listinfo/freeswitch-users">http://lists.freeswitch.org/mailman/listinfo/freeswitch-users</a><BR>
UNSUBSCRIBE:<a href="http://lists.freeswitch.org/mailman/options/freeswitch-users">http://lists.freeswitch.org/mailman/options/freeswitch-users</a><BR>
<a href="http://www.freeswitch.org">http://www.freeswitch.org</a><BR>
</SPAN></FONT></FONT><FONT SIZE="2"><FONT FACE="Helvetica, Verdana, Arial"><SPAN STYLE='font-size:10pt'> <BR>
</SPAN></FONT></FONT><FONT FACE="Monaco, Courier New"><SPAN STYLE='font-size:11pt'><BR>
<HR ALIGN=CENTER SIZE="3" WIDTH="95%"></SPAN></FONT><FONT SIZE="2"><FONT FACE="Consolas, Courier New, Courier"><SPAN STYLE='font-size:10pt'>_________________________________________________________________________<BR>
Professional FreeSWITCH Consulting Services:<BR>
<a href="consulting@freeswitch.org">consulting@freeswitch.org</a> <<a href="http://consulting@freeswitch.org">http://consulting@freeswitch.org</a>> <BR>
<a href="http://www.freeswitchsolutions.com">http://www.freeswitchsolutions.com</a><BR>
<BR>
FreeSWITCH-powered IP PBX: The CudaTel Communication Server<BR>
<a href="http://www.cudatel.com">http://www.cudatel.com</a><BR>
<BR>
Official FreeSWITCH Sites<BR>
<a href="http://www.freeswitch.org">http://www.freeswitch.org</a><BR>
<a href="http://wiki.freeswitch.org">http://wiki.freeswitch.org</a><BR>
<a href="http://www.cluecon.com">http://www.cluecon.com</a><BR>
<BR>
FreeSWITCH-users mailing list<BR>
<a href="FreeSWITCH-users@lists.freeswitch.org">FreeSWITCH-users@lists.freeswitch.org</a> <<a href="http://FreeSWITCH-users@lists.freeswitch.org">http://FreeSWITCH-users@lists.freeswitch.org</a>> <BR>
<a href="http://lists.freeswitch.org/mailman/listinfo/freeswitch-users">http://lists.freeswitch.org/mailman/listinfo/freeswitch-users</a><BR>
UNSUBSCRIBE:<a href="http://lists.freeswitch.org/mailman/options/freeswitch-users">http://lists.freeswitch.org/mailman/options/freeswitch-users</a><BR>
<a href="http://www.freeswitch.org">http://www.freeswitch.org</a><BR>
</SPAN></FONT></FONT></BLOCKQUOTE></BLOCKQUOTE></BLOCKQUOTE><FONT SIZE="2"><FONT FACE="Consolas, Courier New, Courier"><SPAN STYLE='font-size:10pt'><BR>
</SPAN></FONT></FONT><FONT FACE="Monaco, Courier New"><SPAN STYLE='font-size:11pt'>-- <BR>
Ken<BR>
<FONT COLOR="#0000FF"><U><a href="http://www.FreeSWITCH.org">http://www.FreeSWITCH.org</a><BR>
<a href="http://www.ClueCon.com">http://www.ClueCon.com</a><BR>
<a href="http://www.OSTAG.org">http://www.OSTAG.org</a><BR>
</U></FONT>irc.freenode.net #freeswitch<BR>
</SPAN></FONT>
</BODY>
</HTML>